2022 CVEs (page 13)
Page 13 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-49813 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix error handling in ena_init() The ena_init() won't destroy workqueue created… |
CVE-2022-49812 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: bridge: switchdev: Fix memory leaks when changing VLAN protocol The bridge driver can off… |
CVE-2022-49811 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drbd: use after free in drbd_create_device() The drbd_destroy_connection() frees the "con… |
CVE-2022-49810 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing xas_retry() calls in xarray iteration netfslib has a number of places… |
CVE-2022-49809 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix skb leak in x25_lapb_receive_frame() x25_lapb_receive_frame() using skb_copy… |
CVE-2022-49808 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: don't leak tagger-owned storage on switch driver unbind In the initial commit d… |
CVE-2022-49807 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a memory leak in nvmet_auth_set_key When changing dhchap secrets we need to re… |
CVE-2022-49806 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_star… |
CVE-2022-49805 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: lan966x: Fix potential null-ptr-deref in lan966x_stats_init() lan966x_stats_init() c… |
CVE-2022-49804 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: s390: avoid using global register for current_stack_pointer Commit 30de14b1884b ("s390: c… |
CVE-2022-49803 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: Fix memory leak of nsim_dev->fa_cookie kmemleak reports this issue: unreferen… |
CVE-2022-49802 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix null pointer dereference in ftrace_add_mod() The @ftrace_mod is allocated by… |
CVE-2022-49801 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in tracing_read_pipe() kmemleak reports this issue: unreference… |
CVE-2022-49800 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() test_gen_sy… |
CVE-2022-49799 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix wild-memory-access in register_synth_event() In register_synth_event(), if s… |
CVE-2022-49798 | Medium | 4.7 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race where eprobes can be called before the event The flag that tells the ev… |
CVE-2022-49797 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test… |
CVE-2022-49796 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit… |
CVE-2022-49795 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: rethook: fix a potential memleak in rethook_alloc() In rethook_alloc(), the variable rh i… |
CVE-2022-49794 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() If iio_trigge… |
CVE-2022-49793 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() dev_set_name() all… |
CVE-2022-49792 | High | 7.3 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: mp2629: fix potential array out of bound access Add sentinel at end of maps to… |
CVE-2022-49791 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix multishot accept request leaks Having REQ_F_POLLED set doesn't guarantee th… |
CVE-2022-49790 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting un… |
CVE-2022-49789 | High | 7.0 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: zfcp: Fix double free of FSF request when qdio send fails We used to use the wrong… |
CVE-2022-49788 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() `struct vmci_event_qp`… |
CVE-2022-49787 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() pci_get_device()… |
CVE-2022-49786 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: properly pin the parent in blkcg_css_online blkcg_css_online is supposed to p… |
CVE-2022-49785 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add overflow check in sgx_validate_offset_length() sgx_validate_offset_length()… |
CVE-2022-49784 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/uncore: Fix memory leak for events array When a CPU comes online, the per-CP… |
CVE-2022-49783 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the f… |
CVE-2022-49782 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: perf: Improve missing SIGTRAP checking To catch missing SIGTRAP we employ a WARN in __per… |
CVE-2022-49781 | Medium | 4.7 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling a… |
CVE-2022-49780 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() If device_regi… |
CVE-2022-49779 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case In __unregister_… |
CVE-2022-49778 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: arm64/mm: fix incorrect file_map_count for non-leaf pmd/pud The page table check trigger… |
CVE-2022-49777 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: Input: i8042 - fix leaking of platform device on module removal Avoid resetting the modul… |
CVE-2022-49776 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: macvlan: enforce a consistent minimal mtu macvlan should enforce a minimal mtu of 68, eve… |
CVE-2022-49775 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tcp: cdg: allow tcp_cdg_release() to be called multiple times Apparently, mptcp is able t… |
CVE-2022-49774 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign() Should not call even… |
CVE-2022-49773 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix optc2_configure warning on dcn314 [Why] dcn314 uses optc2_configure_… |
CVE-2022-49772 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() snd_usbmidi_output_open… |
CVE-2022-49771 | Medium | 4.7 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: dm ioctl: fix misbehavior if list_versions races with module loading __list_versions will… |
CVE-2022-49770 | Critical | 9.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding snaps fails When decoding the snaps fai… |
CVE-2022-49769 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Check sb_bsize_shift after reading superblock Fuzzers like to scribble over sb_bsiz… |
CVE-2022-49768 | High | 7.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: 9p: trans_fd/p9_conn_cancel: drop client lock earlier syzbot reported a double-lock here… |
CVE-2022-49767 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: 9p/trans_fd: always use O_NONBLOCK read/write syzbot is reporting hung task at p9_fd_clos… |
CVE-2022-49766 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: netlink: Bounds-check struct nlmsgerr creation In preparation for FORTIFY_SOURCE doing bo… |
CVE-2022-49765 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/9p: use a dedicated spinlock for trans_fd Shamelessly copying the explanation from Te… |
CVE-2022-49764 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent bpf program recursion for raw tracepoint probes We got report from sysbot [1… |
CVE-2022-49763 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix use-after-free in ntfs_attr_find() Patch series "ntfs: fix bugs about Attribute… |
CVE-2022-49762 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ntfs: check overflow when iterating ATTR_RECORDs Kernel iterates over ATTR_RECORDs in mft… |
CVE-2022-42450 | Medium | 4.6 | 2025-04-30 | Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications. |
CVE-2022-42449 | Medium | 4.6 | 2025-04-30 | Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications |
CVE-2022-27562 | Medium | 4.6 | 2025-04-30 | Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications. |
CVE-2022-41871 | Medium | 6.0 | 2025-04-28 | SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the us… |
CVE-2022-44760 | Medium | 4.6 | 2025-04-24 | Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications. |
CVE-2022-44759 | Medium | 4.6 | 2025-04-24 | Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications. |
CVE-2022-47112 | Low | 2.5 | 2025-04-19 | 7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected. |
CVE-2022-47111 | Low | 2.5 | 2025-04-19 | 7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected. |
CVE-2022-26323 | | 2025-04-17 | Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Cla… | |
CVE-2022-43852 | Medium | 5.3 | 2025-04-14 | IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system. |
CVE-2022-43851 | Medium | 5.9 | 2025-04-14 | IBM Aspera Console 3.4.0 through 3.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. |
CVE-2022-43850 | Medium | 5.4 | 2025-04-14 | IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2022-43847 | Medium | 5.4 | 2025-04-14 | IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow a… |
CVE-2022-43840 | Medium | 4.3 | 2025-04-14 | IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive… |
CVE-2022-49761 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in run_one_delayed_ref() Currently we have a btrfs_debug() for… |
CVE-2022-49760 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() Patch series "mm/huget… |
CVE-2022-49759 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: VMCI: Use threaded irqs instead of tasklets The vmci_dispatch_dgs() tasklet function call… |
CVE-2022-49758 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: reset: uniphier-glue: Fix possible null-ptr-deref It will cause null-ptr-deref when resou… |
CVE-2022-49757 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: EDAC/highbank: Fix memory leak in highbank_mc_probe() When devres_open_group() fails, it… |
CVE-2022-49756 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe() sp_usb_phy_probe()… |
CVE-2022-49755 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait While performing fast compositi… |
CVE-2022-49754 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix a buffer overflow in mgmt_mesh_add() Smatch Warning: net/bluetooth/mgmt_ut… |
CVE-2022-49753 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of client_count in dma_chan_get() The first time dma_chan… |
CVE-2022-49752 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() The 'paren… |
CVE-2022-49751 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: w1: fix WARNING after calling w1_process() I got the following WARNING message while remo… |
CVE-2022-49750 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Add u64 casts to avoid overflowing The fields of the _CPC object are unsig… |
CVE-2022-49749 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multiplication to avoid overflow In function… |
CVE-2022-49748 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of int 32 b… |
CVE-2022-49747 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: erofs/zmap.c: Fix incorrect offset calculation Effective offset to add to length was bein… |
CVE-2022-49746 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the function sdm… |
CVE-2022-49745 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: fpga: m10bmc-sec: Fix probe rollback Handle probe error rollbacks properly to avoid leaks. |
CVE-2022-49744 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix pte marker when fork() without fork event Patch series "mm: Fixes on pte mar… |
CVE-2022-49743 | High | 7.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: ovl: Use "buf" flexible array for memcpy() destination The "buf" flexible array needs to… |
CVE-2022-49742 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: initialize locks earlier in f2fs_fill_super() syzbot is reporting lockdep warning a… |
CVE-2022-49741 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: fix error handling code in ufx_usb_probe The current error handling code… |
CVE-2022-49740 | High | 7.1 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This… |
CVE-2022-49739 | High | 7.1 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed (inline… |
CVE-2022-49738 | High | 7.1 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on i_extra_isize in is_alive() syzbot found a f2fs bug: BUG… |
CVE-2022-39163 | Medium | 4.7 | 2025-03-26 | IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could exploit a desynchronized browser connect… |
CVE-2022-1804 | Medium | 5.5 | 2025-03-25 | accountsservice no longer drops permissions when writting .pam_environment |
CVE-2022-49737 | High | 7.7 | 2025-03-16 | In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by… |
CVE-2022-29059 | Low | 2.7 | 2025-03-14 | An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb version 7.0.1 and below, 6.4.2 and b… |
CVE-2022-48610 | Medium | 5.5 | 2025-03-10 | This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2. An app may be abl… |
CVE-2022-43454 | High | 7.8 | 2025-03-10 | A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2… |
CVE-2022-49733 | High | 7.8 | 2025-03-02 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC There is a small race window at snd_pcm_oss_s… |
CVE-2022-49732 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: sock: redo the psock vs ULP protection check Commit 8a59f9d1e3d4 ("sock: Introduce sk->sk… |
CVE-2022-25773 | Medium | 4.3 | 2025-02-26 | This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server. * Improper Limitatio… |
CVE-2022-49731 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely (and pr… |